PT-2026-59174 · Pypi · Hermes-Agent

Published 2026-07-13 · Updated 2026-07-13

OSV

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Hermes Agent before 0.16.0 creates response store.db and webhook subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets.

Fix

Related Identifiers

PYSEC-2026-2511

Affected Products

Hermes-Agent

References · 10

• https://osv.dev/vulnerability/PYSEC-2026-2511 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-53870 · Security Note
• https://github.com/NousResearch/hermes-agent · Note
• https://github.com/NousResearch/hermes-agent/pull/31469 · Note
• https://github.com/NousResearch/hermes-agent/commit/3bace071bfadf2d2bec2ee048471a31ec920e3e8 · Note
• https://github.com/NousResearch/hermes-agent/pull/30917 · Note
• https://github.com/NousResearch/hermes-agent/releases/tag/v2026.6.5 · Note
• https://vulncheck.com/advisories/hermes-agent-sensitive-file-permission-vulnerability-in-store-files · Note
• https://github.com/advisories/GHSA-99f9-j8r3-p853 · Note
• https://pypi.org/project/hermes-agent · Note